Privacy policy

This policy explains what personal data Everythingship ("we") collects when you use this website or buy from us, and how we use it. We are the data controller. You can contact us at the email address on our contact page.

What we collect

• When you order: your name, email address, phone number, delivery and billing address, and what you bought.
• When you create an account: your name, email address and a securely hashed password. We never see or store your password itself.
• When you contact us: your name, email address and your message.
• Payment details: card payments are handled by Stripe. Your card number goes straight to Stripe and never reaches our servers.

Why we use it

• To process, deliver and support your order (to perform our contract with you).
• To keep records we're legally required to keep, such as sales records for HMRC (legal obligation).
• To answer your messages (legitimate interest).

We don't sell your data and we don't send marketing emails.

Who we share it with

• Stripe to take payments.
• Delivery companies to deliver your order: your name, address and phone number.
• Our hosting and email providers, who store and send data on our behalf.

How long we keep it

We keep order records for six years, as required for tax purposes. Account details are kept until you ask us to delete your account. Messages are kept for up to two years.

Cookies

We only use cookies that the site needs to work: one to keep your basket, and one to keep you signed in. We don't use analytics or advertising cookies. Stripe may set cookies during checkout to prevent fraud.

Your rights

Under UK data protection law you can ask for a copy of your data, ask us to correct or delete it, or object to how we use it. Email the email address on our contact page. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.